$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft File: 32f4e84a-4abf-4422-8d26-57083e3e17cd.mft (raw, json) Hash identifier: 416cRYB8V7E7/r6QdOhK3fT2V/03cqp1R+8Oa7TnFso= Subject key identifier: 66:68:BE:77:68:28:9F:3C:C7:FC:9B:A5:20:7C:DB:0C:87:27:47:1F Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F43285849352BEBAA98BBC208CED43A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft Manifest number: 010D0C9F43285847015292E43AF8658719E684CF Signing time: Sun 16 Mar 2025 14:00:07 +0000 Manifest this update: Sun 16 Mar 2025 14:00:07 +0000 Manifest next update: Wed 19 Mar 2025 14:00:00 +0000 Files and hashes: 1: 32f4e84a-4abf-4422-8d26-57083e3e17cd.crl (hash: Azc/FPV7jM4gJB0+ISNsp1Bt6NtlrAnxY51dGGrOYE4=) 2: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (hash: qNdXVujv0QmHH+HeHWwI7wU1l9QUEe5D13GfIYM3FEA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:2b:eb:aa:98:bb:c2:08:ce:d4:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Mar 16 14:00:07 2025 GMT Not After : Mar 19 14:00:00 2025 GMT Subject: CN=864d8512-afae-4cbe-a64b-a4d3af47047b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:ec:94:c9:d4:1c:11:ab:a8:2c:52:9a:e3: 29:7c:8d:b6:6d:fd:2a:23:22:d8:e6:e2:0c:69:ce: 76:f9:4e:7c:31:1c:3d:07:55:f6:cd:c8:22:a7:1b: 9a:ef:64:e1:1a:8c:97:1f:0c:42:5e:22:bc:56:ac: 6d:8e:37:c2:44:c4:6a:57:bf:81:f2:72:c6:47:21: 81:34:6a:0f:49:63:3b:c4:92:c0:74:b1:48:77:ed: df:ef:0a:f6:17:c7:61:42:81:63:6e:85:1a:b3:e6: 4f:02:a7:fc:b3:78:1c:69:5c:f2:67:cc:3f:05:69: 30:f0:e3:00:b3:79:9d:23:be:5b:0c:a0:43:2d:bd: 17:51:9c:f2:ab:08:27:f1:5d:f4:83:09:7b:d9:eb: a7:ad:c6:fd:e3:f0:25:f4:3f:57:a6:62:b2:89:ca: c3:1c:b5:46:2e:0a:89:3e:66:b4:51:75:0a:3b:8d: b4:0d:48:80:1c:3a:7a:3f:4f:32:f1:81:c6:bb:53: de:a4:9b:bc:cb:8a:01:88:3d:3c:12:b3:2f:b2:3f: df:42:ad:f5:e2:05:78:d9:3e:32:38:95:cb:be:0f: 09:68:50:54:1f:3d:4b:b1:9c:58:12:11:af:3e:71: 4a:13:a1:73:e6:de:fd:27:35:bb:4b:6a:e9:27:cb: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:BE:77:68:28:9F:3C:C7:FC:9B:A5:20:7C:DB:0C:87:27:47:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:67:0f:18:33:c7:01:f3:40:69:77:5e:79:93:16:62:be:b5: a4:76:64:eb:c7:9b:6e:e6:3c:44:5e:a7:5c:e0:50:b7:c9:4a: 9c:90:d8:e5:6c:8a:30:a5:5f:c9:98:bb:7d:61:58:d2:1b:0d: ae:49:d5:75:54:37:90:a8:68:4e:28:56:b0:72:1f:41:97:b0: c0:9f:a9:8f:5a:ac:0f:a8:6c:d5:70:b9:4d:c1:e1:62:43:b7: 09:78:77:c3:46:97:ae:63:ad:5e:9b:a7:c2:dd:27:a7:0b:24: 4e:d3:d3:3a:be:9f:a2:ef:75:e1:00:66:94:ff:e5:71:f1:01: d4:fc:d3:6b:ba:60:b0:18:21:06:6c:32:b9:10:20:7d:b0:0c: 32:4b:4d:cf:b7:a1:06:30:93:33:a9:d8:11:b0:06:e9:65:69: bb:37:c0:94:5a:0c:16:d9:67:2e:d6:0f:b5:bb:d7:f7:30:81: 0e:81:15:28:1d:86:3f:01:39:ed:1c:4a:1a:ab:3d:a7:85:0e: 68:52:ad:fb:a5:ce:d4:77:99:05:e1:58:5a:17:3a:5a:25:0f: e8:e5:ef:8b:ad:01:04:6c:52:20:b6:b6:10:1e:bf:a1:b1:69: 32:14:5e:a3:a8:35:82:c1:ec:aa:fb:d8:b8:9e:10:a4:6a:5a: fc:b6:5c:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEk1K+uqmLvCCM7UOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI1MDMxNjE0MDAwN1oXDTI1MDMxOTE0MDAwMFowLzEtMCsGA1UEAxMk ODY0ZDg1MTItYWZhZS00Y2JlLWE2NGItYTRkM2FmNDcwNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCrslMnUHBGrqCxSmuMpfI22bf0qIyLY5uIM ac52+U58MRw9B1X2zcgipxua72ThGoyXHwxCXiK8VqxtjjfCRMRqV7+B8nLGRyGB NGoPSWM7xJLAdLFId+3f7wr2F8dhQoFjboUas+ZPAqf8s3gcaVzyZ8w/BWkw8OMA s3mdI75bDKBDLb0XUZzyqwgn8V30gwl72eunrcb94/Al9D9XpmKyicrDHLVGLgqJ Pma0UXUKO420DUiAHDp6P08y8YHGu1PepJu8y4oBiD08ErMvsj/fQq314gV42T4y OJXLvg8JaFBUHz1LsZxYEhGvPnFKE6Fz5t79JzW7S2rpJ8uWfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGZovndoKJ88x/ybpSB82wyHJ0cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvMzJmNGU4NGEtNGFiZi00 NDIyLThkMjYtNTcwODNlM2UxN2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANZw8YM8cB80Bpd155kxZi vrWkdmTrx5tu5jxEXqdc4FC3yUqckNjlbIowpV/JmLt9YVjSGw2uSdV1VDeQqGhO KFawch9Bl7DAn6mPWqwPqGzVcLlNweFiQ7cJeHfDRpeuY61em6fC3SenCyRO09M6 vp+i73XhAGaU/+Vx8QHU/NNrumCwGCEGbDK5ECB9sAwyS03Pt6EGMJMzqdgRsAbp ZWm7N8CUWgwW2Wcu1g+1u9f3MIEOgRUoHYY/ATntHEoaqz2nhQ5oUq37pc7Ud5kF 4VhaFzpaJQ/o5e+LrQEEbFIgtrYQHr+hsWkyFF6jqDWCweyq+9i4nhCkalr8tlzu -----END CERTIFICATE-----Generated at Mon Mar 17 08:39:19 2025 by rpki-client